[
https://issues.apache.org/jira/browse/WICKET-5326?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jesse Long updated WICKET-5326:
-------------------------------
Summary: Wicket doesn't encrypt links and Ajax URLs for mounted pages when
CryptoMapper is used (was: Wicket doesn't encrypt links and Ajax URLs when
CryptoMapper is used)
> Wicket doesn't encrypt links and Ajax URLs for mounted pages when
> CryptoMapper is used
> --------------------------------------------------------------------------------------
>
> Key: WICKET-5326
> URL: https://issues.apache.org/jira/browse/WICKET-5326
> Project: Wicket
> Issue Type: Bug
> Affects Versions: 6.10.0
> Environment: Linux
> Reporter: Walter B. Rasmann
> Assignee: Jesse Long
> Labels: security
> Fix For: 6.18.0, 7.0.0-M4
>
> Attachments: 5326.tar.gz, QueryParameterCryptoMapper.java,
> QueryParameterCryptoMapper2.java, Wicket_6_1_6_QuickStart.zip
>
>
> URL encryption does not work in Wicket links and Ajax URLs.
> For links the URL appears unencrypted in the href attribute value and is only
> later forwarded to the encrypted URL using a 302 response.
> I am uploading a quickstart.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
